Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
File:                     35392e3135332e34342e302f32322d3234203d3e20323634383235.roa (raw, json)
Hash identifier:          YXp0sl63MWlXVX38TilaOx71flIMu/ejKK6KocGMHKw=
Subject key identifier:   C4:F6:23:BC:EE:2A:E7:92:A9:4E:FE:48:95:23:73:13:80:2D:84:58
Certificate issuer:       /CN=4042BFADA396ABB702E65D77D2E207DB761B973F
Certificate serial:       3B6E11D7BC451B312073C0D571BFFB16A7A3C06C
Authority key identifier: 40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa
Signing time:             Tue 05 Mar 2024 18:13:40 +0000
ROA not before:           Tue 05 Mar 2024 18:08:40 +0000
ROA not after:            Tue 04 Mar 2025 18:13:40 +0000
asID:                     264825
IP address blocks:        59.153.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl
                          rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Thu 23 May 2024 17:37:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:6e:11:d7:bc:45:1b:31:20:73:c0:d5:71:bf:fb:16:a7:a3:c0:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4042BFADA396ABB702E65D77D2E207DB761B973F
        Validity
            Not Before: Mar  5 18:08:40 2024 GMT
            Not After : Mar  4 18:13:40 2025 GMT
        Subject: CN=C4F623BCEE2AE792A94EFE4895237313802D8458
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:51:78:d9:86:38:cf:11:62:02:0e:a5:3c:1e:
                    d3:25:09:d5:f2:65:38:46:29:ca:6e:61:28:0c:7c:
                    a0:f5:37:40:71:b7:c6:47:8c:f7:22:57:28:28:fe:
                    c9:0f:ab:a3:d8:b1:90:03:11:3c:a0:12:1d:13:cb:
                    99:22:81:1c:01:0e:12:8b:d5:c0:66:a2:c9:f3:0d:
                    6b:da:a9:15:85:91:6a:10:9d:20:1a:6a:5a:f9:a3:
                    8f:51:86:1a:8f:7c:55:78:7c:85:bd:d2:b2:4e:5c:
                    8c:2d:ec:ab:91:e0:46:3f:f1:7b:65:e6:dc:69:01:
                    e2:fb:68:5d:5a:94:6f:1d:44:ee:cd:46:d2:60:96:
                    33:72:68:4c:e2:4c:06:96:50:8d:62:8e:69:c9:da:
                    7b:3e:2d:55:38:0e:cc:27:a3:07:d4:cd:f7:f9:6a:
                    d2:4e:fd:d0:5c:9b:d9:4a:11:46:19:d8:d2:5f:2f:
                    c2:f6:c0:14:05:ba:4f:de:cf:68:4f:6b:a7:da:77:
                    f6:bd:31:93:23:3f:1f:e3:ea:f8:35:65:ed:1c:ea:
                    40:23:4d:31:4c:c8:15:19:f3:24:d0:35:74:05:fd:
                    81:34:5d:2b:41:70:a2:90:f9:8e:ae:b8:7c:03:8e:
                    99:ea:ac:00:52:7f:2b:3d:66:1e:43:45:db:4a:be:
                    ce:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:23:BC:EE:2A:E7:92:A9:4E:FE:48:95:23:73:13:80:2D:84:58
            X509v3 Authority Key Identifier:
                keyid:40:42:BF:AD:A3:96:AB:B7:02:E6:5D:77:D2:E2:07:DB:76:1B:97:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/4042BFADA396ABB702E65D77D2E207DB761B973F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4042BFADA396ABB702E65D77D2E207DB761B973F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/56F26D6FB13FFA5CEF49F491DD46201849E41B08E40577A1E9BEDD5857C3732F/0/35392e3135332e34342e302f32322d3234203d3e20323634383235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.153.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:46:93:da:e3:6e:5b:5c:64:15:2a:f3:d5:eb:91:db:ab:f0:
         04:07:68:55:9f:a8:a2:13:b0:4f:da:56:01:f6:13:26:b9:f1:
         8b:05:21:24:1f:ec:ce:fc:fa:a4:49:0b:d6:6c:00:e5:52:9c:
         04:cb:a6:54:52:ee:1f:87:32:4e:d0:b8:34:87:10:dc:a3:c5:
         c1:c1:63:4c:90:e2:3a:51:90:69:91:8b:0d:5a:e4:76:0b:88:
         ac:7b:e2:e7:e3:4c:9d:24:35:25:3c:b2:fa:f9:22:f0:da:b2:
         88:e6:91:03:f9:c1:a5:75:54:0a:b7:ed:5f:85:71:3a:b9:ad:
         5a:bd:67:95:22:95:8d:79:8f:66:15:97:bd:11:95:f1:9e:47:
         ad:1d:ed:87:ea:45:7e:92:e6:5e:ef:ee:ab:45:79:dd:df:ea:
         49:ae:6b:19:e8:80:f1:ce:08:dc:63:8c:f4:ce:fa:3f:ca:1d:
         42:bf:c9:53:e8:c4:6f:ee:6a:2f:a7:45:a5:7b:29:24:a6:96:
         81:f4:8e:5f:46:70:f1:de:fc:a5:6b:b5:06:9c:35:2b:df:6f:
         ab:7b:04:7d:f2:ce:3e:53:2b:4d:35:2e:fd:3a:30:61:da:0e:
         c8:01:5d:cd:dc:37:e3:93:72:1c:d6:67:23:21:a1:3c:7c:28:
         27:f9:dc:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 14:42:12 2024 by rpki-client on console-ams.rpki-client.org